Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
File:                     ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa (raw, json)
Hash identifier:          Ls5SvUvJwn59REijI9DXuCjyrvSqslkDNhmWA+RjEQs=
Subject key identifier:   39:AA:8D:60:6E:8F:B7:79:2E:A2:4A:9F:D5:9F:25:98:5D:C4:BA:F7
Certificate issuer:       /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial:       010D0C9F43285845BA7E240A98B39C1AF3E96900
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     25875
IP address blocks:        2607:9f00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:24:0a:98:b3:9c:1a:f3:e9:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=adb5ce3d-0687-4ca2-ac3b-523c2c5cb7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:23:36:c6:97:fd:60:31:70:80:87:cc:5c:
                    7e:0d:2d:24:8d:d0:f0:f7:73:a6:27:ab:5a:ec:98:
                    81:78:6c:7a:10:48:4d:c3:65:7e:1b:78:66:4e:52:
                    15:77:cd:a3:6a:13:4c:42:2e:de:33:25:d4:9a:25:
                    70:ef:e9:f8:4a:f3:80:28:58:93:01:f2:12:6d:de:
                    92:d1:73:0b:2a:34:79:c7:a1:b1:e9:20:1c:82:a8:
                    37:5b:98:e2:77:13:98:b6:22:88:bc:e5:22:ae:fc:
                    99:8e:dd:e4:a2:9e:d0:c5:45:36:19:10:04:66:c1:
                    1a:de:ec:4b:99:04:f1:f9:83:d0:a0:09:a4:d6:db:
                    36:00:30:54:f2:24:09:9a:35:94:d4:d8:f2:7c:e5:
                    ed:5f:e6:92:ff:48:2b:76:b9:22:56:32:e6:f1:5b:
                    64:77:c0:87:eb:74:23:de:6e:0e:d9:6e:15:f3:27:
                    eb:94:3f:01:d0:bb:88:54:f1:8c:a2:a8:c7:70:07:
                    bd:3e:d7:9d:94:67:47:53:07:e7:52:24:c4:fe:29:
                    ef:c0:87:1b:62:68:63:6e:c8:2d:41:d7:8d:73:94:
                    30:90:85:f7:44:6d:23:76:c5:0d:2c:a2:f2:31:8f:
                    81:31:8f:cf:57:c8:a8:8d:0a:76:74:5a:a8:c0:06:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:8D:60:6E:8F:B7:79:2E:A2:4A:9F:D5:9F:25:98:5D:C4:BA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:c6:be:0e:37:6f:ed:b5:53:72:82:e9:70:77:27:39:cc:
         f4:64:9a:83:25:2d:aa:55:fb:cf:4b:74:cd:d6:cc:0e:93:94:
         03:7b:2d:18:3f:c7:6a:1b:79:69:4b:db:26:b1:73:68:14:f2:
         d3:9c:9c:a1:9e:3a:4b:39:dd:1e:c5:80:56:70:b5:61:e9:57:
         ec:70:2b:5d:cd:d4:02:7c:61:b6:b6:b4:35:41:d9:f7:ad:8d:
         f0:1e:32:45:37:e9:3d:4b:f9:f6:20:e0:4e:94:7c:11:95:31:
         42:0e:28:5d:33:db:83:47:f1:40:a5:40:7c:c1:aa:f1:72:2c:
         a1:ec:af:7d:7d:a7:be:5c:ba:3c:ae:b7:bb:43:36:ec:0e:e0:
         bc:e7:80:0e:a0:c1:2d:69:64:70:9d:58:9c:9b:5c:49:99:ae:
         58:0b:73:04:31:38:9a:f7:d6:d1:13:84:6f:d8:b0:79:3a:e2:
         16:37:34:46:8a:8e:ef:49:b3:eb:0d:84:75:5a:ab:fd:11:05:
         05:7c:a2:9d:92:13:99:fa:30:1b:e4:ba:fd:ce:ca:45:d8:24:
         20:9d:f9:15:7b:33:97:59:cd:12:56:16:ce:7e:5e:19:65:3f:
         ed:34:41:c1:13:39:db:04:86:4b:f8:df:05:c3:87:42:61:46:
         c4:d9:02:ba
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEW6fiQKmLOcGvPpaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkNjE4ZjktN2U5ZS00MzZjLTgwZDAtZDg3ZGQxYzBi
MmIwMB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk
YWRiNWNlM2QtMDY4Ny00Y2EyLWFjM2ItNTIzYzJjNWNiN2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp88jNsaX/WAxcICHzFx+DS0kjdDw93OmJ6ta
7JiBeGx6EEhNw2V+G3hmTlIVd82jahNMQi7eMyXUmiVw7+n4SvOAKFiTAfISbd6S
0XMLKjR5x6Gx6SAcgqg3W5jidxOYtiKIvOUirvyZjt3kop7QxUU2GRAEZsEa3uxL
mQTx+YPQoAmk1ts2ADBU8iQJmjWU1NjyfOXtX+aS/0grdrkiVjLm8Vtkd8CH63Qj
3m4O2W4V8yfrlD8B0LuIVPGMoqjHcAe9PtedlGdHUwfnUiTE/invwIcbYmhjbsgt
QdeNc5QwkIX3RG0jdsUNLKLyMY+BMY/PV8iojQp2dFqowAboOwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDmqjWBuj7d5LqJKn9WfJZhdxLr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2
MThmOS03ZTllLTQzNmMtODBkMC1kODdkZDFjMGIyYjAvYmEwMmIwNjQtOTc4Yy0z
YTBiLWE5YTAtZmZkYmY3NjAzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGVkNjE4ZjktN2U5ZS00MzZjLTgw
ZDAtZDg3ZGQxYzBiMmIwLzhlZDYxOGY5LTdlOWUtNDM2Yy04MGQwLWQ4N2RkMWMw
YjJiMC5jcmwwHwYDVR0jBBgwFoAULGY7IO/SYBE5jZ7mwAErOgumzV8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2MThmOS03ZTllLTQzNmMtODBkMC1kODdk
ZDFjMGIyYjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgefADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAkysa+Djdv7bVTcoLpcHcnOcz0ZJqDJS2qVfvPS3TN1swOk5QDey0Y
P8dqG3lpS9smsXNoFPLTnJyhnjpLOd0exYBWcLVh6VfscCtdzdQCfGG2trQ1Qdn3
rY3wHjJFN+k9S/n2IOBOlHwRlTFCDihdM9uDR/FApUB8warxciyh7K99fae+XLo8
rre7QzbsDuC854AOoMEtaWRwnVicm1xJma5YC3MEMTia99bRE4Rv2LB5OuIWNzRG
io7vSbPrDYR1Wqv9EQUFfKKdkhOZ+jAb5Lr9zspF2CQgnfkVezOXWc0SVhbOfl4Z
ZT/tNEHBEznbBIZL+N8Fw4dCYUbE2QK6
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:31 2024 by rpki-client on console-ams.rpki-client.org